ISO 37008: Internal investigations

ISO 37008 certification signifies that an organisation has implemented an investigations system that meets international standards. It demonstrates a commitment to conducting fair and impartial internal investigations.

ISO 37008 outlines requirements for conducting internal investigations, from initial report to case wrap-up and reporting. The guidelines walk you through best practices in internal investigations and provide a roadmap for implementation.

The cost of ISO 37008 certification varies depending on factors such as the size of the organisation, the complexity of operations and the certification body. We can get you a quote so you can start budgeting. It is typically under USD10,000/year.

ISO 37008 is used to improve internal investigations. It helps establish policies, procedures and controls for conducting investigations across any company issue.

Typically, investigations relate to the steps taken to manage a complaint or feedback around some type of misconduct allegation inside a company. The process followed to conduct that investigation is detailed in ISO 37008.

The basic principles of an investigation conducted under the ISO 37008 guidelines are professional, independent, confidential, objective, impartial, legal and lawful.

ISO 37008 is technically a set of guidelines for which Speeki Europe provides its own service for certification. A standard in ISO nomenclature is a stronger and larger system that is more managed by ISO. A guideline is typically more straightforward to adopt and follow.

No. Unlike a 'standard', the guidelines are less stringent. You should be building a 'system' around investigations; however, it may fall short of being an ISO 'management system'.

No. ISO 37008 is not mandatory but is highly recommended for organisations seeking to establish a robust investigations framework. It is a set of globally recognised guidelines that support other ISO standards like ISO 37001 and ISO 37301.

Section 6 of the guidelines discusses having a comprehensive policy around investigations. This policy sets out your primary position on key elements of your investigations system.

ISO 37008 helps with conducting investigations so you can continue to comply with bribery risks, ensuring compliance with laws, enhancing reputation, increasing stakeholder trust and improving operational efficiency by implementing a structured investigations system.

Absolutely! ISO 37008 is suitable for organisations of any size. Small businesses can equally benefit from enhanced procedures to manage investigations that help show your customers you take issues seriously when they are raised.

Yes, ISO 37008 is a global set of guidelines for conducting internal investigations that is recognised and respected worldwide. It helps organisations align with international best practices in conducting investigations.

Choose a certification body with experience in ISO 37008. Evaluate their credentials, expertise and client testimonials. Speeki Europe is a reputable certification body with vast experience in compliance.

ISO 37008 certification is maintained through continual improvement, regular internal audits and periodic surveillance audits by the certification body to ensure ongoing compliance with the guidelines.

The timeframe for ISO 37008 certification varies depending on the size and complexity of the organisation, but it typically takes a few weeks from the initial steps to the final certification.

Without a proper investigations system, organisations are more vulnerable to claims of investigation bias and mismanagement. You may also end up breaching local laws, breaching agreements with unions, or having issues with shareholders.

The implementation of ISO 37008 involves top management, internal audit, compliance officers, legal, HR, finance, procurement and all employees to ensure a comprehensive approach to investigations.